In a forensic examination of hard drives for digital evidence, what type of user is most likely to have the most file slack to analyze?

Name: In a forensic examination of hard drives for digital evidence, what type of user is most likely to have the most file slack to analyze?
Brand: Quizplus
Rating: 4.7 (54 reviews)

Question

Quizplus · Accepted Answer

A user with lots of allocation units per block or cluster is likely to have more file slack, as larger clusters can lead to more unused space at the end of files, which can contain remnants of previously deleted data.

In a Forensic Examination of Hard Drives for Digital Evidence